AWS DevSecOps Engineer

Job Title: AWS DevSecOps Engineer | GitHub Actions | GHAS | EKS | Terraform

Location: Pan India

Experience: 10+ Years

Job Summary

We are seeking a highly skilled AWS DevSecOps Engineer with strong expertise in GitHub Actions, GitHub Advanced Security (GHAS), AWS, Kubernetes (EKS), and Infrastructure as Code. The ideal candidate will be responsible for designing and managing secure CI/CD platforms, implementing GitHub Enterprise governance, integrating security controls into development workflows, and enabling scalable cloud-native deployments across multiple environments.

Key Responsibilities

• Design, implement, and maintain GitHub Actions workflows across development, staging, and production environments.
• Build, manage, and optimize self-hosted Actions Runner Controller (ARC) runners on Kubernetes (EKS).
• Implement runner auto-scaling, pod identity, workload isolation, and network security policies.
• Integrate GitHub Advanced Security (GHAS) capabilities, including:
• Secret Scanning
• Push Protection
• CodeQL Scanning
• Dependency Review
• Migrate legacy CI/CD pipelines from Jenkins, TeamCity, AWS CodePipeline, and CodeBuild to GitHub Actions.
• Enforce GitHub governance controls, including branch protection rules, required status checks, deployment approvals, and environment gates.
• Develop reusable GitHub Actions, composite actions, and reusable workflow templates for enterprise-wide adoption.
• Collaborate with Security and Engineering teams to implement SAST, DAST, SCA, and secrets management practices throughout the software delivery lifecycle.
• Manage GitHub Enterprise Cloud (GHEC) or Enterprise Managed Users (EMU) environments.
• Configure user provisioning, access control, SCIM integrations, and Okta-based identity management.
• Monitor CI/CD platforms using Splunk, CloudWatch, Datadog, and logging solutions.
• Support Infrastructure-as-Code deployments using Terraform, CloudFormation, and AWS CDK.
• Drive DevSecOps best practices, automation, compliance, and platform reliability.

Required Skills & Qualifications

Technical Skills

• 10+ years of experience in DevOps, DevSecOps, or Platform Engineering.
• Strong hands-on experience with GitHub Actions and GitHub Enterprise.
• Experience implementing GitHub Advanced Security (GHAS).
• Strong AWS cloud experience.
• Hands-on experience with Kubernetes and Amazon EKS.
• Experience managing self-hosted runners and ARC (Actions Runner Controller).
• Expertise in CI/CD pipeline design and automation.
• Strong understanding of application security concepts including:
• SAST
• DAST
• SCA
• Secrets Management
• Experience with Infrastructure as Code:
• Terraform
• CloudFormation
• AWS CDK
• Experience with monitoring and observability tools such as Splunk, Datadog, and CloudWatch.
• Strong scripting skills using Bash, Python, or PowerShell.
• Experience with GitOps and modern deployment practices.

Preferred Skills

• Experience migrating enterprise CI/CD platforms to GitHub Actions.
• Knowledge of Zero Trust and DevSecOps frameworks.
• Exposure to container security platforms and cloud security tools.
• Experience in regulated or compliance-driven environments.

Education

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related field.

Certifications (Preferred)

• AWS Certified DevOps Engineer Professional
• AWS Certified Solutions Architect
• Certified Kubernetes Administrator (CKA)
• GitHub Actions Certification
• GitHub Advanced Security Certification
• HashiCorp Terraform Certification